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Abstract of J P 8314786 (A) 

PURPOSE: To automatically change the access 
permission to a file to which access permission is 
required to be changed with time by setting an 



access attribute including time information and 
referring to it at the time of access. 
CONSTITUTION: An access attribute file 4 is 
provided where combinations of access object files 
5, users permitted to access them, classifications of 
reference or update, and time zones are stored in 
the unit of access object files. An access attribute 
file editing function 1 refers to and updates the 
access attribute file 4. A file access function 2 is 
certainly started at the time of an access request to 
an access object file and refers to the access 
attribute file 4 to discriminate whether the user, the 
classification of reference or update, and the time 
are permitted or not, and the file is accessed only 
when they are permitted.; Further, access object 
files 5 are so guarded that they cannot be accessed 
by functions other than the file access function 1 . 
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JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 

CLAIMS 

[Claim(s)] 

[Claim 1]A file access control method comprising: 
An accessing object file. 

A user to whom access is permitted, classification of reference or updating, an access attribute file which 
memorizes combination of a time zone to an accessing object file basis. 

An access attribute file editing function to perform renewal of reference of an access attribute file. 
A file access function for it to certainly be started at the time of an access request to an accessing object 
file, and to judge whether a user, classification of reference or updating, and time are permitted with 
reference to an access attribute file, and to perform file access only when a permission is granted. 

[Claim 2]The file access control method according to claim 1 making usable said access attribute file 
editing function and said file access function to a directory. 

[Claim 3]The file access control method according to claim 1 hanging a guard on said accessing object file, 
and making access impossible from other than said file access function. 

[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Industrial Application]Especially this invention relates to the file access control method to the file in an 

electronic computer system about a file access control method. 

[0002] 

[Description of the Prior Art]In the conventional file access control method, the propriety of file access 
was judged by confirming whether a user, the classification of reference or updating, and other conditions 
are permitted at the time of the access request to the file of an accessing object. 
[0003]The object of the method (JP,2-263250,A) which gave the item of time to the record of the 
database is a database. 

Since time is used as a search condition of a record, it differs from a file access control method. 
[0004] 

[Problem(s) to be Solved by the Invention]In the conventional file access control method, propriety of file 
access was not able to be judged by confirming whether the conditions of time are permitted. For this 
reason, even when the time zone of access propriety was decided beforehand, it had to double with 
progress of time and the right to access files had to be changed by the help at any time. 
[0005] 

[Means for Solving the Problem]An access attribute file a file access control method of this invention 
remembers an accessing object file, and classification of a user and reference by which access is 
permitted, or updating and combination of a time zone to be to an accessing object file basis, An access 
attribute file editing function to perform renewal of reference of an access attribute file, It was always 
started at the time of an access request to an accessing object file, and with reference to an access 
attribute file, it judged whether a user, classification of reference or updating, and time would be permitted, 
and only when a permission is granted, it has a file access function to perform file access. 
[0006]This invention is provided with a function which makes usable said access attribute file editing 
function and said file access function to a directory. 

[0007]This invention hung a guard on said accessing object file, and is provided with a function of which 

access is made impossible from other than said file access function. 

[0008] 

[Example]Next, the example of this invention is described with reference to drawings. 
[0009] Drawing 1 is a typical block diagram of the first example of the file access control method of this 
invention. In draw ing 1 , the access attribute file 4 has each field of the file name 41, the user 42, the 
classification 43, and the time zone 44, as shown in drawin g 2. 

[00 10] Drawing 3 is a process flow of the access attribute file editing function 1 which performs an addition, 
deletion, updating, and reference of an item to the access attribute file 4. First, the user who uses the 
access attribute file editing function 1 confirms whether be allowed users, such as a system administrator, 
in the user check processing 1 1 , and processing is closed when inaccurate. Next, in the editorial-contents 
check processing 1 2, it confirms whether there is any error or there is nothing in the contents of an 
addition, deletion, updating, and reference, i.e., the classification of reference or updating, a time zone, etc., 
and processing is closed when inaccurate. Under the present circumstances, an ungenerated file and the 
check of whether to make inaccurate the file name not existing and a user in order to make it possible to 
set up beforehand about an unregistered user presuppose that it is arbitrary. As appointed contents, what 
the user A called the renewal possibility of from March 4 before March 10 of, and the user B said that 
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reference is possible on and after March 1 1 can be considered, for example to the file F. Days and months 
etc. are omitted in specification of a time zone, and specification called what day of the week is also 
enabled from when to when every week from what [ month / what ] to what day every day. Finally in the 
access attribute editing processing 13, the period until [ of the item to the access attribute file 4 ] an 
addition, deletion and updating, and until it refers to it and displays a reference result on the display 3 in 
reference is performed. Thereby, the file name 41, the user 42, the classification 43, and setting out and 
reference of the time zone 44 of each item are attained at the access attribute file 4. 
[001 1] Drawing 4 is certainly started at the time of the access request to the file 5 of an accessing object, 
judges whether a user, the classification of reference or updating, and time are permitted with reference to 
the access attribute file 4, and only when a permission is granted, it is a process flow of the file access 
function 2 which performs file access. First, the access attribute reference process 21 refers all the groups 
of the file name 41 which is in agreement with the file name of an accessing object, the user 42, the 
classification 43, and the time zone 44 from the access attribute file 4. Next, the user in this access, the 
classification of reference or updating, and time judge whether it is in agreement with any of the result 
referred to by the access attribute reference process 21 in the access attribute comparison processing 22, 
and processing is closed when inaccurate. About time, it is judged whether it is contained in a time zone. 
Finally access of the accessing object file 5 is performed in the file access operation 23. Only when in 
agreement [ in the file name 41, the user 42, the classification 43, and the time zone 44 which are set as 
the access attribute file 4 ] by this, it becomes possible to access the accessing object file 5. 
[001 2] A card is hung on the accessing object file 5, and from other than file access function 2, it sets up 
so that it may not be accessed. 

[0013]When the file system which is the operation target of this method has a layered structure of a 
directory as the second example, applying the access attribute set up to the directory of a higher rank to a 
low-ranking file and directory also contains in this method. 

[0014]ln the case of the second example, the access attribute file editing function 1 and the file access 
function 2 are made usable to a directory. Thereby, setting out of the item of a directory is attained at the 
access attribute file 4. 

[0015]In the case of the second example, the process flow of the file access function 2 serves as drawing 
5. First, the access attribute reference process 31 refers all the groups of the file name 41 which is in 
agreement with the file name or directory name of an accessing object, the user 42, the classification 43, 
and the time zone 44 from the access attribute file 4. Next, the user in this access, the classification of 
reference or updating, and time confirm whether it is in agreement with any of the result referred to by the 
access attribute reference process 31 in the access attribute comparison processing 32, and processing is 
closed when inaccurate. Next, by the superior directory decision processing 33, it is judged whether a 
superior directory exists in the file or directory of a checked object. When it does not exist [ the case 
where it exists / reference process / 31 / access attribute ] about this directory, it escapes from a loop. 
Finally access of the accessing object file 5 is performed in the file access operation 34. It enables this to 
apply the access attribute set up to the directory of a higher rank to a low-ranking file and directory. 
[0016] 

[Effect of the Invention]As explained above, the file access control method of this invention, The access 
attribute including a hour entry is set as the access attribute file, and it is certainly judged at the time of 
access of an accessing object file whether access to an accessing object file and a superior directory is 
permitted with reference to an access attribute file. By this, an access permit can be automatically 
changed to the file to which it is necessary to change an access permit with the passage of time, and 
improvement in conservativeness is achieved. 

[0017]For example, to the file F, when the user A specifies it as the renewal possibility of from March 4 
before March 10 of and the user B specifies it that reference is possible on and after March 1 1, it becomes 
possible about the user A doing the end of edit of the file F to open the file F to waiting and the user B. 
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damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a typical block diagram of the first example of this invention. 

[Drawing 2] It is a figure showing the structure of the access attribute file in the first example of this 
invention. 

[Drawing 3] It is a flow chart of the access attribute file editing function in the first example of this 
invention. 

[Drawing 4] It is a flow chart of the file access function in the first example of this invention. 
[Drawing 5 ]It is a flow chart of the file access function in the second example of this invention. 
[Description of Notations] 

1 Access attribute file editing function 

2 File access function 

3 Display 

4 Access attribute file 

5 Accessing object file 



[Translation done.] 
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